WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...

EUVD-2026-83453

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...

EUVD-2026-83448

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed...

socgholish_finder

Buscador de SocGholish Script sencillo para escanear sitios web en busca de inyecciones de SocGholish. Comprueba y muestra la inyección si se encuentra, y desofusca y muestra los dominios de URL de shadowing. root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 Detalle Descripción El paquete pdfkit desde 0.0.0 es vulnerable a Inyección de Comandos donde la URL no está debidamente saneada. PoC Iniciar un servidor HTTP root@kitploit: 1- python3 -m http.server 80 Iniciar un listener de netcat root@kitploit: 2- nc -lnvp...

CVE-2026-19794

CVE-2026-19794 WP-Stats = 2.56 - Cross-Site Scripting Almacenado No Autenticado URL del Plugin https://wordpress.org/plugins/wp-stats/ Descripción XSS reflejado no autenticado en el parámetro GET statsauthor de statspage. El filtro de saneamiento striptags se aplica antes de urldecode, lo que...

CVE-2026-93740

CVE-2026-93740 affects the Totolink A3002MU wireless router (firmware Hh-B20211125.1046 ). The vulnerability resides in the formWlEncrypt function within the file /boafrm/formWlEncrypt . Manipulating the submit-url argument triggers a buffer overflow , which can be exploited remotely without auth...

SSRF-CVE-2020-15002

Summary The URL validation logic applied when handling /appsuite/api/oxodocumentfilter&action=addfile suffers from three defects which can be used to execute Time of Check Time of Use ToCToU SSRF attack. This issue allows malicious actors to execute HTTP GET requests on internal network services...

CVE-2026-48710

CVE-2026-48710 Principio: Starlette es un framework ASGI ligero y de código abierto para Python. El problema surge de que el framework Starlette, al procesar la estructura de datos de la URL, confía en el host enviado por el cliente y lo concatena directamente a la variable url para el posterior...

CVE-2026-93739

A buffer overflow in the formWlAc function of the file /boafrm/formWlAc on the Totolink A3002MU router (firmware Hh-B20211125.1046 ) can be triggered remotely by manipulating the submit-url argument. The vulnerability is rated CVSS 3.1: 9.9 CRITICAL (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with proo...

cve-2026-43515-poc

CVE-2026-43515 — Apache Tomcat 安全约束绕过 可利用性判定： 确认可利用。针对受分割的 配置保护的资源的 POST 请求会完全绕过身份验证。所需 web.xml 配置在标准部署中不常见——详见分析。 目录 概述 受影响版本 根本原因 分析 仓库结构 依赖要求 使用方法 预期输出 参考链接 免责声明 概述 CVE-2026-43515 是 Apache Tomcat 安全约束评估逻辑中的一个漏洞。当一个 定义了多个 块，这些块共享相同的 URL 扩展名模式（例如 .html），但每个块声明了不同的 HTTP 方法时，Tomcat 仅对第一个 匹配集合中声明的...

CVE-2022-41040

CVE-2022-41040 Microsoft Exchange vulnerable a falsificación de solicitud del lado del servidor Carga útil : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHER...

vulnerability-url

vulnerability-url ¡ADVERTENCIA! ¡Solo para pruebas y educación! root@kitploit: https://github.com/nu11secur1ty/vulnerability-url/raw/main/Calculator512.exe...

xiaomi-cve-2024-45352

xiaomi-cve-2024-45352 Reporte técnico sobre vulnerabilidad crítica de Xiaomi Vulnerability Summary A vulnerability was discovered in Xiaomi's default browser com.android.browser on various MIUI devices. The app fails to properly validate intents passed via startActivity, allowing malicious apps t...

CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab Laboratorio educativo de reproducción reducida creado a partir del informe de vulnerabilidad pública GHSL-2023-142 de Home Assistant Companion for Android y de la estructura de código abierto de la versión vulnerable 2023.8.2. No se utilizan servidores,...

CVE-2026-91147

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws c...

CVE-2025-14753

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2026-75431_PowerJob_jwt_key_predictable

Clave de Firma JWT de PowerJob Predecible Clave Derivada de la URL JDBC Predeterminada → Falsificación de Tokens 1. Resumen La clave de firma JWT HS256 del servidor PowerJob se deriva decodificando en BASE64 una constante codificada concatenada con el MD5 de la URL JDBC predeterminada...

CVE-2026-85511

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

CVE-2026-85511

A parameter injection flaw was identified in Red Hat EAP's Elytron security subsystem. Specifically, an EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection allows parameter substitution due to missing URL encoding . The vulnerability is rated MEDIUM...